medium4.4
CVE-2026-116502
A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2.
Impact
A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exllamav2/exllamav2_ext/cuda/q_matrix.cu of the component GPTQ Index Handler. Executing a manipulation of the argument g_idx can lead to out-of-bounds write. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Product | Affected versions |
|---|---|
| Turboderp-Org ExLlamaV2 | before 0.3.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.